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Top Stories 

• The former managing clerk for a New York-based law firm Simpson Thacher & Bartlett 
was indicted January 15 for allegedly using his position to obtain nonpublic information 
and pass it on to 2 other men from New Jersey and New York City who traded on the 
information to obtain $5.6 million in illicit profits. - NJ.com (See item 5 ) 

• Authorities in Dallas, Texas, are searching for a suspect known as the "Lunch Buddy 
Bandit" believed to be responsible for 1 1 bank robberies in the area since December. - 
KTVT 11 Fort Worth (See item 6) 

• The U.S. Department of Transportation announced January 15 that it fined Southwest 
Airlines $1.6 million for violating tarmac delay rules during a 2014 winter storm in 
Chicago, Illinois. - NBC News (See item 8) 

• A 2-alarm fire at Quality Growers Floral Company’s moss farm in Volusia County, 



Florida, January 16 engulfed 3 structures and caused an estimated $2 million in damage. - 
Central Florida News 13 (See item 15 ) 
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Energy Sector 



1. January 15, Salt Lake Tribune - (Utah) Ex-Utah utility executive admits stealing 
thousands from taxpayer-owned company. The former chief financial officer of 
Heber Light & Power pleaded guilty January 14 to stealing over $50,000 from the 
company by billing personal expenses to a company account between February 2010 
and May 2013. 

Source: http://www.sltrib.com/news/2063018-155/ex-utah-utility-executive-admits- 
stealing-thousands 

For another story, see item 9 
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Chemical Industry Sector 

2. January 15, U.S. Chemical Safety Board - (National) CSB releases safety bulletin on 
anhydrous ammonia incident near Mobile, Alabama safety bulletin notes five key 
lessons to prevent hydraulic shock. The U.S. Chemical Safety Board (CSB) released 
its safety bulletin January 15 which reports safety lessons derived from an investigation 
in a 2010 anhydrous ammonia release at Millard Refrigerated Services Inc., in 
Theodore, Alabama, in an effort to educate industries that utilize anhydrous ammonia 
in bulk refrigeration operations on how to avoid hydraulic shock. The report 
recommended that users should avoid the manual interruption of evaporators in defrost 
and ensure control systems are equipped with password protection, among other 
findings. 

Source: http://www.csb.gov/csb-releases-safetv-bulletin-on-anhydrous-ammonia- 

incident-near-mobile-alabama-safety-bulletin-notes-five-kev-lessons-to-prevent- 

hydraulic-shock/ 

T Return to top i 

Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 
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Critical Manufacturing Sector 

3. January 16, Detroit News - (National) U.S. opens probe into 50,000 2015 Jeep 
Cherokee SUVs. The National Highway Traffic Safety Administration announced 
January 16 that it is opening an investigation into 50,000 model year 2015 Jeep 
Cherokee vehicles prompted by a fire that broke out in a new vehicle January 4 in 
California which quickly consumed the vehicle and a January 5 complaint that noted 
smoke coming from under the hood. 

Source: http://www.detroitnews.com/storv/business/autos/chrvsler/2015/01/16/us- 
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opens-probe-ieep-cherokee-suvs/21 853619/ 
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Defense Industrial Base Sector 

Nothing to report 
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Financial Services Sector 

4. January 16, Associated Press - (Ohio) Ohio man accused of defrauding 19 investors 
out of millions. A Uniontown, Ohio man was indicted January 14 for allegedly running 
a Ponzi scheme between October 2009 and September 2013 that defrauded 19 investors 
and resulted in investor losses of about $5.5 million. 

Source: 

http://hosted2.ap.org/OHDEG/80f29b286d7947b8b83363545418dc2b/Article 2015- 
01-1 6-OH-Investment-Fraud-Scheme/id-868bOe448df945fbbfbb8bcffafdef8e 

5. January 15, NJ.com - (New Jersey; New York) Law firm insider faces charges in 
$5.6M trading scheme. The former managing clerk for New York-based law firm 
Simpson Thacher & Bartlett was indicted January 15 for allegedly using his position to 
obtain nonpublic information and pass it on to 2 other men from New Jersey and New 
York City who traded on the information to obtain $5.6 million in illicit profits. One of 
the men pleaded guilty in April 2014 and charges are pending against the other alleged 
participant. 

Source: 

http://www.ni.com/news/index.ssf/2015/01/law firm insider faces charges in 56 mil 
lion tradi.html 

6. January 15, KTVT 11 Fort Worth - (Texas) 'Lunch Buddy Bandit' may be 
responsible for 11 Dallas bank robberies. Authorities in Dallas are searching for a 
suspect known as the "Lunch Buddy Bandit" believed to be responsible for 1 1 bank 
robberies in the area since December. 

Source: http://dfw.cbslocal.com/2015/01/15/lunch-buddv-bandit-mav-be-responsible- 
for- 1 1 -dallas-bank-robberies/ 
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Transportation Systems Sector 

7. January 15, Associated Press - (Kansas) Train crash, derailment closes Kan. 
highway, injures 3. The Kansas Highway Patrol reported that a train collided with a 
semi-truck on Kansas 39 in Wilson County January 15 causing 3 injuries and the train 
to derail. The accident remains under investigation. 

Source: http://salinapost.com/2015/01/15/train-crash-derailment-closes-kan-highwav- 
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injures-3/ 



8. January 15, NBC News - (National) U.S. fines Southwest Airlines record $1.6 
million for runway delays. The U.S. Department of Transportation announced January 
15 that it fined Southwest Airlines $1.6 mi llion for violating tarmac delay rules during 

a winter storm in Chicago in 2014 by not giving passengers the chance to disembark 
from the aircraft after 3 hours of waiting time. 

Source: http://www.nbcnews.com/news/us-news/u-s-fines-southwest-airlines-record-l- 
6-million-runway-n287236 

9. January 15, Easton Express-Times - (Pennsylvania) Interstate 95 accident in Bucks 
County leaves one dead, closes northbound lanes. Interstate 95 in Bensalem 
Township was closed for several hours January 15 following an accident involving 2 
semi-trucks and 3 passenger vehicles that caused 1 death and several injuries. 

Source: http://www.lehighvallevlive.com/breaking- 

news/mdex.ssl720 15/01 /interstate 95 accident : n buck.html 

10. January 15, KGTV 10 San Diego - (California) Fatal crash shuts down SR-78 in San 
Marcos. Westbound lanes of Route 78 in San Marcos were shut down January 15 for 
more than 2 hours after an incident where an occupant of a 2-vehicle accident on the 
eastbound side ran across the highway to the westbound side and was fatally struck by 
another vehicle. 

Source: http://www.10news.com/news/fatal-crash-shuts-down-sr-78-in-san-marcos 

11. January 15, KTVT 11 Fort Worth - (Texas) Fiery big rig crash closes highway in 
Dallas. Interstate 30 in Dallas was closed for several hours after a semi-truck carrying 
produce caught on fire after hitting a barrier wall when a tire blew out spilling diesel 
fuel and food onto the roadway. Firefighters and cleanup crews responded to the scene. 
Source: http://dfw.cbslocal.com/2015/01/15/fierv-big-rig-crash-closes-highwav-in- 
dallas/ 

12. January 14, Dickinson Press- (North Dakota) Mandan Tesoro refinery recalls jet 
fuel. Tesoro Corp. stated January 14 that it recalled jet fuel January 9-10 that was 
produced at its refinery in Mandan because it did not meet aviation specifications, 
delaying flights at Theodore Roosevelt Regional Airport and Bismarck Municipal 
Airport January 9. 

Source: http://www.thedickinsonpress.com/news/north-dakota/3655445-mandan- 
tesoro-refinery-recalls-iet-fuel 

13. January 14, Associated Press - (New Jersey) London-bound flight returns to N.J. 
due to smoke report. A United Airlines flight with 84 passengers and 13 crew 
members traveling from New Jersey to London returned to Newark Liberty 
International Airport after reports of possible smoke in the cabin. A United 
spokeswoman stated that the flight landed safely and was canceled while maintenance 
examined the aircraft. 
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Source: http://www.detroitnews.com/story/news/nation/2015/01/14/plane-turned- 
back/2 1754995/ 



For another story, see item 35 
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Food and Agriculture Sector 

14. January 16, Jamestown Sun - (North Dakota) Man trapped in beans up to chest in 
grain bin rescued. Rescue crews used special equipment January 15 to safely extract a 
man who was trapped in a grain bin at Kensal Farmers Elevator Co., in Stutsman 
County. Authorities are investigating the incident and are working to determine the 
identity of the individual and why he was in the bin. 

Source: http://www.iamestownsun.com/news/state/3657002-man-trapped-beans-chest- 
grain-bin-rescued 

15. January 16, Central Florida News 13 - (Florida) Fire destroys 3 buildings at De 
Leon Springs farm. A 2-alarm fire at Quality Growers Floral Company’s moss farm in 
Volusia County January 16 engulfed 3 structures and caused an estimated $2 million in 
damage. The cause of the fire is under investigation. 

Source: 

http://www.mvnewsl3.com/content/news/cfnewsl3/news/article.html/content/news/arti 
cles/cfn/2015/1/16/fire breaks out at p.html 

16. January 16, U.S. Food and Drug Administration - (National) Franklin Farms issues 
allergy alert for Chili-Bean Veggiburgers due to undeclared peanut allergen. The 
U.S. Food and Drug Administration announced January 15 that Franklin Farms issued a 
voluntary recall for some Chili-Bean Veggiburgers after a third party supplier notified 
the company that one of the spice ingredients used in the products may contain 
undeclared peanut. The recalled products were sold through retail stores and 
foodservice channels in several States. 

Source: http://www.fda.gov/Safety/Recalls/ucm430570.htm 

17. January 16, U.S. Food and Drug Administration - (National) Garden Lites issues 
allergy alert on undeclared peanuts in Garden Lites Kale & Quinoa Souffle, 
Garden Lites Southwestern Souffle, Garden Lites Veggie Chili & Cornbread Melt, 
Garden Lites Kale & Brown Rice Veggie Bites & Classic Cooking Kale and 
Quinoa Veggie Cakes. The U.S. Food and Drug Administration reported January 15 
that Garden Lites, The Delicious Vegetable Company, owned and operated by Classic 
Cooking LLC, issued a voluntary recall of several products sold in retail stores 
nationwide after a third party vendor notified the company that cumin used in the 
products was contaminated with peanut allergen. The affected products include Garden 
Lites Kale & Quinoa Souffle, Garden Lites Southwestern Souffle, Garden Lites Veggie 
Chili & Cornbread Melt, Garden Lites Kale & Brown Rice Veggie Bites, and Classic 
Cooking Kale and Quinoa Veggie Cakes. 

Source: http://www.fda.gov/Safety/Recalls/ucm430560.htm 
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For another story, see item 2 
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Water and Wastewater Systems Sector 

18. January 15, KRWG 22 Las Cruces - (New Mexico) Sunland Park: Mexico 
wastewater spill contained. The City of Sunland Park reported January 13 that 
partially treated water from a water treatment plant in Mexico spilled across the border 
and into parts of the city, and that authorities alerted residents to be cautious walking in 
the areas surrounding the spill. U.S. and Mexican officials worked to treat the affected 
areas and minimize the impact of the spill, and the New Mexico Environmental 
Department Ground Water Division was alerted to investigate the incident. 

Source: http://krwg.org/post/sunland-park-mexico-wastewater-spill-contained 

19. January 15, Sanford Herald - (North Carolina) SANFORD: 2,200 gallons of 
wastewater enter Cape Fear River Basin. The Sanford Public Works Department 
stated that more than 2,200 gallons of untreated wastewater spilled into the Little 
Buffalo and Big Buffalo Creek from 7 different man holes January 12 due to heavy 
rains. The Superintendent of Sanford’s Sewer Utilities Department stated that City of 
Sanford employees vacuumed the wastewater and that the North Carolina Division of 
Water Resources was reviewing the incident. 

Source: http://www.sanfordherald.com/news/x761903775/SANFQRD-2-200-gallons- 
of-wastewater-enter-Cape-Fear- River-Basin 
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Healthcare and Public Health Sector 

20. January 15, Miami Herald - (Florida) Hazmat situation at Jessie Trice sends 7 to the 
hospital. Over 100 individuals were evacuated while 7 others were transported to an 
area hospital after being exposed to Phenol, a strong disinfectant, when 2 small glass 
containers broke at the Jessie Trice Community Health Center in Northwest Miami- 
Dade January 15. Crews worked to clean the solution before allowing people back into 
the building. 

Source: http://www.miamiherald.com/news/local/community/miami-dade/edison- 
liberty-cit y/article67 06542. html 

21. January 15, KLFY 10 Lafayette - (Louisiana) Electrical malfunction temporarily 
closes VA clinic. An electrical malfunction due to a failed central heating system 
forced the Lafayette Veteran’s Affairs Outpatient Clinic in Louisiana to close January 
15 through January 20 while crews cleaned the smoke and residue and repaired the 
system. 

Source: http://klfv.com/2015/01/15/electrical-malfunction-temporarily-closes-va-clinic/ 
For another story, see item 27 
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Government Facilities Sector 

22. January 15, Long Island Newsday - (New York) Authorities investigate bomb 
threats at three East End high schools, officials say. Bishop McGann-Mercy High 
School, Riverhead High School, and Mercy High School in New York were evacuated 
and classes were cancelled following a series of bomb threats January 15. Police 
cleared the campuses after no suspicious devices were found and continue to 
investigate the threats. 

Source: http://www.newsdav.com/long-island/suffolk/authorities-investigate-bomb- 
threats-at-three-east-end-high-schools-officials-say- 1.98 12066 

23. January 15, Associated Press - (International) 2nd Navy captain pleads guilty in 
bribery scheme. A second U.S. Navy captain pleaded guilty in San Diego January 15 
to conspiring to commit bribery in a scheme involving a Malaysian defense contractor 
accused of defrauding the U.S. military out of at least $20 million. Four officers were 
charged for allegedly providing classified information to Singapore -based Glenn 
Defense Marine Asia Ltd., in exchange for bribes. 

Source: http://www.msn.com/en-us/news/crime/2nd-navv-captain-pleads-guiltv-in- 
bribery-scheme/ar-AA8bwz6 



24. January 15, KNBC 4 Los Angeles - (California) Bomb threat at Long Beach City 
College prompts evacuation. Long Beach City College students were evacuated from 
buildings on the Long Beach campus January 15 while police investigated a possible 
explosive device in a vehicle. Classes resumed after 4 hours once police deemed the 
area safe. 

Source: http://www.nbclosangeles.com/news/local/Possible-Explosive-Device-Found- 
at-Long-Beach-City-College-LBPD-2887 15801 .html 

25. January 15, United Press International - (Oklahoma) OK police chief shot in school 
bomb threat investigation. Officials cancelled classes at all Sentinel Public Schools 
January 15 due to an alleged bomb threat made to the Community Action Center. The 
Sentinel police chief was shot multiple times and suffered minor injuries during an 
investigation into the threats that led a husband and wife to open fire on the police chief 
and two Washita County sheriffs deputies while they were entering the suspects’ 
residence. 

Source: http://www.upi.com/Top News/US/2015/01/15/OK-police-chief-shot-in- 
school-bomb-threat-investigation/865 1421352000/ 

26. January 15, Santa Cruz Sentinel - (Ohio) FBI: Man planned to bomb US Capitol, 
kill officials. The FBI arrested and charged an Ohio man January 14 after his Twitter 
posts sympathizing with Islamic terrorists led to an undercover operation where he 
attempted to convince an FBI informant that they should blow up the U.S. Capitol and 
ki ll government officials by sharing his plans for the plot. A Cincinnati- area resident 
was also charged during the week of January 12 for threatening to murder a U.S. 
government representative. 
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Source: http://www.santacruzsentinel.com/general-news/20150115/fbi-man-planned- 
to-bomb-us-capitol-kill-officials 
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Emergency Services Sector 

27. January 15, KSDK 5 St. Louis - (Missouri) STL Co. employee causes HIPAA 

breach. St. Louis County officials notified an unknown number of inmates at the Buzz 
Westfall Justice Center after learning that a former health department employee 
emailed a document that contained the names and Social Security numbers of some 
inmates who were at the justice center between 2008 and 2014, to their own personal 
email account. The former employee was told to delete the document and authorities do 
not believe any of the information was accessed beyond the worker. 

Source: http://www.ksdk.com/story/news/local/2015/01/15/hippa-breach- 
martellaro/2 1821215/ 



For another story, see item 25 



T Return to top i 

Information Technology Sector 

28. January 16, Softpedia - (International) Google reveals security flaw in Windows 7, 
8.1, patch to be shipped in February. Researchers with Google released details and a 
proof of concept (PoC) for a vulnerability in Windows 7 and Windows 8.1 that could 
allow an attacker to encrypt or decrypt data. Microsoft stated that a fix for the 
vulnerability will be released in February. 

Source: http://news.softpedia.com/news/Google-Reveals-Security-Flaw-in-Windows-7- 
8-l-Patch-to-Be-Shipped-in-Februarv-470191.shtml 

29. January 16, Help Net Security - (International) One-click mobile fraud variant 
throws browser for a loop. Symantec researchers observed a variant of a mobile one- 
click fraud scam currently being used against users in Japan that creates a continuous 
barrage of pop-up ads when a user tries to close the ad which directs them to sign up for 
a paid service. The attack incapacitates the browser but other apps can be used and the 
attack can be stopped by clearing the contents of the browser cache. 

Source: http://www.net-security.org/secworld.php?id= 17831 

30. January 16, Softpedia - (International) Teen arrested for last year's DDoS attack on 
PSN and Xbox networks. Authorities in the U.K. in cooperation with the FBI arrested 
a man January 16 for allegedly participating in distributed denial of service (DDoS) 
attacks against the Sony Playstation and Microsoft Xbox gaming networks during 2014. 
Source: http://news.softpedia.com/news/Teen-Arrested-for-Last-Year-s-DDoS-Attack- 
on-PSN-and-Xbox-Networks-470257.shtml 

31. January 16, Help Net Security - (International) Typosquatting abuse of 500 most 
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popular websites analyzed. Researchers with the University of Leuven in Belguim 
and Stony Brook University in the U.S. released a report on their research into 
typosquatting domains where attackers register domains for misspelled popular 
domains to attempt to capture traffic. The researchers found that half of all 
typosquatting domains can be traced back to four page hosters, and that 95 percent of 
the most popular domains are targeted by typosquatters, among other findings. 
Source: http ://w w w . net- security . or g/sec world .php ?id= 1 7 8 3 3 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

Nothing to report 
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Commercial Facilities Sector 

32. January 16, WBAL 11 Baltimore - (Maryland) Fire ignites in Glen Burnie Toys R Us 
store; 2 sought. Authorities ruled that a 2-alarm fire January 15 at a Toys R Us store in 
Glen Burnie started at a merchandise rack inside a storage room and was intentionally 
set. Police are searching for two suspects in connection with the fire that caused an 
estimated $250,000 in damage to the building and its contents and forced the 
evacuation of the shopping center as a precaution. 

Source: http://www.wbaltv.com/news/fire-ignites-in-glen-burnie-tovs-r-us-storage- 
room/30732302 

33. January 16, SC Magazine - (National) Payment cards targeted in attack on pet 
supplies website. ValuePetSupplies.com notified several thousand customers January 
14 that an unauthorized party accessed the Tennessee-based company’s servers and 
installed malware, potentially compromising the payment card data and other personal 
information of customers between November 25 and December 29. The malicious files 
were removed and the company took additional steps to mitigate the attack and secure 
its systems. 

Source: http://www.scmagazine.com/payment-cards-targeted-in-attack-on-pet-supplies- 
website/article/392821/ 

34. January 15, Nashville Tennessean - (Tennessee) Franklin businesses re-open after 
gas leak. About 50 people were evacuated from businesses at the Watson Glen 
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Shopping Center in Franklin January 15 after a contractor inadvertently struck a natural 
gas line near a sewer system which allowed gas to seep into the buildings. Businesses 
were allowed to reopen more than 3 hours later after crews capped the leak. 

Source: 

http://www.tennessean.com/storv/news/local/williamson/franklin/2015/01/15/gas-leak- 
prompts-evacuation-franklin-strip-mall/2 1811133/ 
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Dams Sector 



35. January 15, WEAU 13 Eau Claire - (Wisconsin) Lock and Dam 5A near Fountain 
City undergoing dewatering. Dewatering was completed at Lock and Dam 5A near 
Fountain City January 15 as part of a maintenance process on the upper Mississippi 
River locks and dams. Lock and Dam 5 A was last dewatered in 1998 and the project is 
expected to cost $3.7million. 

Source: http://www.weau.com/home/headlines/Lock-and-Dam-5A-near-Fountain-City- 
undergoing-dewatering-28875675 l.html 
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Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 



About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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